Specify the default location and default password of TLS certificates

We can configure IBM MQ Explorer to use TLS certificates in the TrustStore and KeyStore to connect to remote queue managers with an TLS-enabled connection.

About this task

To configure IBM MQ Explorer with the location and password of the TLS certificate store, complete the following tasks in IBM MQ Explorer on the computer from which we want to connect to the remote queue manager:

Procedure

1. In IBM MQ Explorer, click Window > Preferences. The Preferences dialog opens.
2. Expand MQ Explorer.
3. Expand Client Connections. The default security settings dialogs are now accessible.
4. Select SSL Key Repositories to display the SSL Key Repositories pane.
5. In the Trusted Certificate Store field, browse for the location of the TrustStore on the computer, and in Personal Certificate Store field, browse for the location of the KeyStore on the computer. The TrustStore and KeyStore contain the TLS certificates that are used with connections using client channel definition tables. It is possible that the TrustStore and KeyStore are in the same location on your computer.
6. (Optional) Click Enter password... in the Trusted certificate Store section to open the SSL Password dialog; in the SSL Password dialog, type the password that IBM MQ Explorer will need to access the store.
7. Click Enter password... in the Personal Certificate Store section to open the SSL Password dialog; in the SSL Password dialog, type the password that IBM MQ Explorer will need to access the store.
8. Click OK to save your changes and to close the Preferences dialog.

Results

IBM MQ Explorer can now use the TLS certificates in the TrustStore and KeyStore to connect to remote queue managers with an TLS-enabled connection. Parent topic: Show or hide a queue manager Parent topic: Preferences for IBM MQ Explorer

Related tasks

• Showing a remote queue manager
• Create a client channel definition table

Related reference

• Default security preferences